key-rotation-manager
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied patterns, configurations, and requests related to key management.
- Ingestion points: User requests mentioning "key rotation manager" and provided configuration data (SKILL.md).
- Boundary markers: None identified; the skill does not explicitly instruct the agent to distinguish between instructions and data.
- Capability inventory: The skill is granted access to
Bash(cmd:*),Write, andEdittools, allowing for system-level operations and file modifications. - Sanitization: There is no evidence of input validation or sanitization before processing data or using it in tool invocations.
- [NO_CODE]: The skill consists entirely of instructions and configuration metadata within the SKILL.md file. It does not include external scripts, executables, or code files, which reduces the risk of direct malicious execution.
Audit Metadata